CVE-2008-6998 PUBLISHED CVSS 9.300000190734863 CRITICAL

Stack-based buffer overflow in chrome/common/gfx/url_elider.cc in Google Chrome 0.2.149.27 and other versions before 0.2.149.29 might allow user-assisted remote attackers to execute arbitrary code via a link target (href attribute) with a large number of path elements, which triggers the overflow when the status bar is updated after the user hovers over the link.

EPSS 21.76% · 95.7th percentile

Risk Scores

CVSS v2.0
9.300000190734863
EPSS Score
21.76%
95.7th percentile

Affected Products

VendorProductVersions
googlechrome0.2.149.27
n/an/an/a

Timeline

References

Open in Interactive Console →